Nebutra

개인정보 처리방침

시행일: January 1, 2025
최종 업데이트: January 1, 2025

At Nebutra ("Company," "we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the "Services").

1. Information We Collect

1.1 Information You Provide

We collect information you directly provide to us, including:

  • Account Information: Name, email address, password, and organization details when you create an account.
  • Profile Information: Profile picture, job title, company name, and other optional information.
  • Payment Information: Billing address and payment method details (processed securely through Stripe).
  • Communications: Messages, feedback, and other communications you send to us.
  • Content: Any content you create, upload, or store using our Services.

1.2 Information Collected Automatically

When you use our Services, we automatically collect certain information:

  • Device Information: Device type, operating system, browser type, and unique device identifiers.
  • Usage Information: Pages viewed, features used, actions taken, and time spent on Services.
  • Log Data: IP address, access times, referring URLs, and system activity logs.
  • Location Information: General location based on IP address (we do not collect precise geolocation).

2. How We Use Your Information

We use the information we collect to:

  • Provide Services: Operate, maintain, and improve our Services.
  • Process Transactions: Handle payments, billing, and related operations.
  • Communicate: Send service announcements, updates, and marketing communications (with consent).
  • Personalize: Customize your experience and provide relevant recommendations.
  • Analyze: Understand usage patterns and improve our Services.
  • Protect: Detect, prevent, and respond to fraud, abuse, and security incidents.

3. How We Share Your Information

We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party vendors who provide services on our behalf, including:

  • Infrastructure: Cloud hosting (Vercel, Supabase), database services
  • Payment Processing: Stripe for secure payment handling
  • Authentication: Clerk for identity management
  • Analytics: PostHog, Vercel Analytics for usage insights

3.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

3.3 Legal Requirements

We may disclose information when required by law, legal process, or government request, or to protect our rights, privacy, safety, or property.

4. Your Rights and Choices

4.1 Access and Portability

You can access your personal information through your account settings and request a copy of your data in a portable format.

4.2 Correction

You can update your account information at any time through the dashboard.

4.3 Deletion

You can request deletion of your account and associated data through settings or by contacting us.

4.4 Marketing Communications

You can opt out of marketing emails by clicking "unsubscribe" in any marketing email or updating your preferences.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit (TLS) and at rest
  • Regular security assessments and penetration testing
  • Access controls and authentication requirements
  • Monitoring and logging of system activity

6. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights regarding your personal information:

  • Right to Know: Request disclosure of information we collect, use, and share.
  • Right to Delete: Request deletion of your personal information.
  • Right to Opt-Out: Opt out of the sale of personal information (we do not sell your data).
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

7. European Privacy Rights (GDPR)

If you are in the EEA, UK, or Switzerland, you have additional rights under GDPR:

  • Legal Basis: We process your data based on contract performance, legitimate interests, or consent.
  • Rights: Access, rectification, erasure, portability, restriction, and objection.
  • DPO: You can contact our Data Protection Officer at dpo@nebutra.com.

8. Contact Us

If you have questions about this Privacy Policy, please contact us:

Nebutra, Inc.
Email: privacy@nebutra.com
Legal: legal@nebutra.com
DPO: dpo@nebutra.com

Privacy Policy — Nebutra